VPN other Leased Line

[dpcatkins1983]

I have a client who has a Leased line, but i'm wanting to create a VPN Connection from our office to their rotuer.

i didn't install the Leased Line which go straight into a ciso 1800 Series router then from that into a Draytek 2860 Router,

How do i go about creating a VPN Connection from our office to theirs? They do have a static ip 165 address, do i need to contact their ISP supplier?

 

[uk26]

Hi Dan,

I'm surprised that you being a provider of I.T Support do not know the answer.

anyway, you would do this on the Draytek Router providing the public IPs set on the Draytek Wan?

 

[dpcatkins1983]

i don't usually deal with Leased lines, only Fibre/ADSL. I've tried setting it up on the draytek, with IKE Policy etc, but it didn't work

 

[it-comms]

Hi there Dan,

once a connection is installed there is no difference in how to setup VPN's

I assume you have Draytek Routers at both locations? can you confirm if the public IP range from the Cisco Router is on the Wan Interface of the Draytek?

You will need to use Lan to Lan VPN with one side set to dial out

you are better using IPsec with 3Des with authentication / Md5 both ends must match

 

[dpcatkins1983]

Yes the Public ip is on the WAN interface of the Draytek router, i can't ping it from my office neither.

i'm just setting it up using the Windows in built VPN function, but will try the Lan to Lan option from Vigor router.

 

[it-comms]

both Cisco and Draytek disable pings by default

 

[dpcatkins1983]

@it-comms - Thanks, i'll try this next time

 

[Cromulent]

you are better using IPsec with 3Des with authentication / Md5 both ends must match

Why in gods name would you use 3DES for IPSec? AES-256 is a much much better option. Same with MD5, rainbow tables exist for it. Use SHA-512 (aka SHA2) instead of MD5.

 

[Adam.Vause]

Hows it going? Just a thought you may want to ask the leased line provider to open the ports on the cisco router if they are not open already. Setting up a LAN to LAN VPN with drayteks is quite simple. I would put my money on a firewall issue.

 

[KM-Tiger]

Setting up a LAN to LAN VPN with drayteks is quite simple.

Indeed.

It has been a good few years since I've used Drayteks for VPN, but I never found them reliable. Perhaps they are better now?

 

[Adam.Vause]

I've never had any issues touch wood. With any VPN tunnel the internet connection at both ends needs to be stable. The drayteks are good at re-establishing a connection if it does drop out.

For me these are the best small business routers on the market that offer a ton of features out of the box.

Great pieces of kit